Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: I+V0BX07v4r3RB35KUDiQGVLdO53OeBRAFi+xnD44cI=
Subject key identifier: 98:EC:3E:BC:0C:DC:1A:E6:D2:8B:8D:BE:A1:9D:15:64:8E:AE:BA:C9
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019769CEEA179EE07D5439B84E7CA98D94BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:00:57 +0000
Manifest this update: Fri 13 Jun 2025 15:00:57 +0000
Manifest next update: Sat 14 Jun 2025 15:00:57 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: vxu8tTqhKjhe9+0gCg64FG+lTGnSdbG/Ab7ybGCUxnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ea:17:9e:e0:7d:54:39:b8:4e:7c:a9:8d:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Jun 13 15:00:57 2025 GMT
Not After : Jun 14 15:00:57 2025 GMT
Subject: CN=98ec3ebc0cdc1ae6d28b8dbea19d15648eaebac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:8d:a7:2e:67:d4:52:a1:86:f8:5e:92:46:
eb:fd:e4:bc:ab:db:ca:65:25:0e:a4:97:52:9f:f5:
e3:04:0f:a3:4f:d0:21:a5:b8:08:5d:54:63:01:41:
9b:15:18:9e:a7:c3:e7:b5:36:90:26:3e:a6:dd:15:
09:f2:1b:76:f5:10:be:f7:7f:b5:cd:22:de:56:7d:
32:f7:8d:70:17:48:09:ba:26:f6:fc:98:7b:47:a9:
ad:aa:01:ab:56:e4:ec:66:79:b1:f9:81:26:97:ad:
ed:35:45:78:6e:a4:80:be:1e:10:9a:f6:3f:fa:a9:
d1:d8:63:01:a9:7a:69:35:81:e2:8f:64:c6:82:45:
8a:1e:35:f5:fb:07:23:b8:36:6b:27:a0:d2:a1:94:
47:5a:0f:d2:33:e3:49:8e:0b:42:91:38:d3:0c:a0:
5b:e0:ca:65:33:31:37:b4:86:9a:ca:1d:ef:89:6a:
74:cb:26:de:79:3d:dc:fd:70:83:0f:d0:c0:82:a3:
c7:76:e6:8b:ac:13:6a:71:d5:14:02:ce:9b:fb:48:
59:9b:a4:47:54:06:a5:dc:1c:58:8b:18:fe:89:8b:
31:e6:38:b9:61:68:9c:14:63:81:35:98:14:6c:31:
04:c3:ad:a1:7f:7f:8d:35:e4:c9:59:20:78:85:74:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EC:3E:BC:0C:DC:1A:E6:D2:8B:8D:BE:A1:9D:15:64:8E:AE:BA:C9
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a7:2e:6f:9d:8c:e3:55:79:7a:dd:7b:7d:f4:4a:49:66:5a:
a0:7d:17:0b:e7:8f:93:96:f2:6a:33:e3:f7:bd:42:01:23:d6:
36:d5:ba:45:71:2b:54:9f:70:53:60:68:55:f9:9e:d4:be:cf:
0e:99:81:3b:78:fe:23:ef:69:81:0a:af:46:ab:09:46:13:07:
d0:88:86:1d:43:3e:b2:79:8d:d0:e2:39:5b:c0:74:68:d4:20:
c1:b2:2d:bd:7a:d0:d3:10:cf:11:ec:89:3b:45:ba:38:32:fc:
63:2d:33:f1:4d:c8:2f:b1:f5:41:d1:45:b5:6e:12:bb:b7:0d:
8f:17:cc:81:36:68:02:eb:6e:b5:58:e2:96:ed:a4:73:33:cc:
70:af:f4:b4:26:4c:ae:2f:a4:80:ca:45:70:13:4e:4d:f1:26:
4b:1a:03:a7:3e:d5:a1:86:40:5b:67:b1:82:22:87:da:ee:ab:
66:2b:a4:84:f1:85:c0:3b:f5:b3:1f:cc:fb:af:67:19:ed:4e:
fe:90:64:f1:82:50:02:4f:49:1d:f7:15:f8:5b:11:42:59:25:
81:33:d0:40:0f:47:e2:61:00:d3:a4:f3:03:42:5a:67:c1:2b:
e6:78:f1:5a:7b:eb:54:be:c6:be:b2:ee:d0:bd:0a:07:b3:89:
39:e9:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:28 2025 by rpki-client